Examples with WorkSecurityMap org.glassfish.connectors.config.WorkSecurityMap used on opensource projects

Example 6 with WorkSecurityMap

use of org.glassfish.connectors.config.WorkSecurityMap in project Payara by payara.

the class AppSpecificConnectorClassLoaderUtil method getModuleScopedResource.

private <T> Resource getModuleScopedResource(String name, String moduleName, Class<T> type, ApplicationInfo appInfo) {
    Resource foundRes = null;
    if (appInfo != null) {
        com.sun.enterprise.config.serverbeans.Application app = appInfo.getTransientAppMetaData(com.sun.enterprise.config.serverbeans.ServerTags.APPLICATION, com.sun.enterprise.config.serverbeans.Application.class);
        Resources resources = null;
        if (app != null) {
            Module module = null;
            List<Module> modules = app.getModule();
            for (Module m : modules) {
                if (ConnectorsUtil.getActualModuleName(m.getName()).equals(moduleName)) {
                    module = m;
                    break;
                }
            }
            if (module != null) {
                resources = appInfo.getTransientAppMetaData(module.getName() + "-resources", Resources.class);
            }
        }
        if (resources != null) {
            boolean bindableResource = BindableResource.class.isAssignableFrom(type);
            boolean poolResource = ResourcePool.class.isAssignableFrom(type);
            boolean workSecurityMap = WorkSecurityMap.class.isAssignableFrom(type);
            boolean rac = ResourceAdapterConfig.class.isAssignableFrom(type);
            Iterator itr = resources.getResources().iterator();
            while (itr.hasNext()) {
                String resourceName = null;
                Resource res = (Resource) itr.next();
                if (bindableResource && res instanceof BindableResource) {
                    resourceName = ((BindableResource) res).getJndiName();
                } else if (poolResource && res instanceof ResourcePool) {
                    resourceName = ((ResourcePool) res).getName();
                } else if (rac && res instanceof ResourceAdapterConfig) {
                    resourceName = ((ResourceAdapterConfig) res).getName();
                } else if (workSecurityMap && res instanceof WorkSecurityMap) {
                    resourceName = ((WorkSecurityMap) res).getName();
                }
                if (resourceName != null) {
                    if (!(resourceName.startsWith(ConnectorConstants.JAVA_MODULE_SCOPE_PREFIX))) {
                        resourceName = ConnectorConstants.JAVA_MODULE_SCOPE_PREFIX + resourceName;
                    }
                    if (!(name.startsWith(ConnectorConstants.JAVA_MODULE_SCOPE_PREFIX))) {
                        name = ConnectorConstants.JAVA_MODULE_SCOPE_PREFIX + name;
                    }
                    if (name.equals(resourceName)) {
                        foundRes = res;
                        break;
                    }
                }
            }
        }
    }
    return foundRes;
}

Example 7 with WorkSecurityMap

use of org.glassfish.connectors.config.WorkSecurityMap in project Payara by payara.

the class AppSpecificConnectorClassLoaderUtil method getApplicationScopedResource.

private <T> Resource getApplicationScopedResource(String name, Class<T> type, ApplicationInfo appInfo) {
    Resource foundRes = null;
    if (appInfo != null) {
        com.sun.enterprise.config.serverbeans.Application app = appInfo.getTransientAppMetaData(com.sun.enterprise.config.serverbeans.ServerTags.APPLICATION, com.sun.enterprise.config.serverbeans.Application.class);
        Resources resources = null;
        if (app != null) {
            resources = appInfo.getTransientAppMetaData(app.getName() + "-resources", Resources.class);
        }
        if (resources != null) {
            boolean bindableResource = BindableResource.class.isAssignableFrom(type);
            boolean poolResource = ResourcePool.class.isAssignableFrom(type);
            boolean workSecurityMap = WorkSecurityMap.class.isAssignableFrom(type);
            boolean rac = ResourceAdapterConfig.class.isAssignableFrom(type);
            Iterator itr = resources.getResources().iterator();
            while (itr.hasNext()) {
                String resourceName = null;
                Resource res = (Resource) itr.next();
                if (bindableResource && res instanceof BindableResource) {
                    resourceName = ((BindableResource) res).getJndiName();
                } else if (poolResource && res instanceof ResourcePool) {
                    resourceName = ((ResourcePool) res).getName();
                } else if (rac && res instanceof ResourceAdapterConfig) {
                    resourceName = ((ResourceAdapterConfig) res).getName();
                } else if (workSecurityMap && res instanceof WorkSecurityMap) {
                    resourceName = ((WorkSecurityMap) res).getName();
                }
                if (resourceName != null) {
                    if (!(resourceName.startsWith(ConnectorConstants.JAVA_APP_SCOPE_PREFIX))) {
                        resourceName = ConnectorConstants.JAVA_APP_SCOPE_PREFIX + resourceName;
                    }
                    if (!(name.startsWith(ConnectorConstants.JAVA_APP_SCOPE_PREFIX))) {
                        name = ConnectorConstants.JAVA_APP_SCOPE_PREFIX + name;
                    }
                    if (name.equals(resourceName)) {
                        foundRes = res;
                        break;
                    }
                }
            }
        }
    }
    return foundRes;
}

Example 8 with WorkSecurityMap

use of org.glassfish.connectors.config.WorkSecurityMap in project Payara by payara.

the class ConnectorRuntime method getWorkSecurityMap.

/**
 * {@inheritDoc}
 */
public List<WorkSecurityMap> getWorkSecurityMap(String raName) {
    List<WorkSecurityMap> workSecurityMap = ConnectorsUtil.getWorkSecurityMaps(raName, getResources());
    List<WorkSecurityMap> appScopedMap = null;
    String appName = raName;
    if (!ConnectorsUtil.isStandAloneRA(raName)) {
        appName = ConnectorsUtil.getApplicationNameOfEmbeddedRar(raName);
        Application application = getApplications().getApplication(appName);
        if (application != null) {
            // embedded RAR
            String resourceAdapterName = ConnectorsUtil.getRarNameFromApplication(raName);
            Module module = application.getModule(resourceAdapterName);
            if (module != null) {
                Resources msr = module.getResources();
                if (msr != null) {
                    appScopedMap = ConnectorsUtil.getWorkSecurityMaps(raName, msr);
                }
            }
        }
    } else {
        Application app = getApplications().getApplication(appName);
        if (app != null) {
            Resources asc = app.getResources();
            if (asc != null) {
                appScopedMap = ConnectorsUtil.getWorkSecurityMaps(raName, asc);
            }
        }
    }
    if (appScopedMap != null) {
        workSecurityMap.addAll(appScopedMap);
    }
    return workSecurityMap;
}

Example 9 with WorkSecurityMap

use of org.glassfish.connectors.config.WorkSecurityMap in project Payara by payara.

the class UpdateConnectorWorkSecurityMap method execute.

public void execute(AdminCommandContext context) {
    final ActionReport report = context.getActionReport();
    if (addPrincipals == null && addGroups == null && removeGroups == null && removePrincipals == null) {
        report.setMessage(localStrings.getLocalString("update.connector.work.security.map.noargs", "update-connector-work-security-map should be executed with atleast one optional argument of " + "either add(principals/usergroups) or remove(principals/usergroups)"));
        report.setActionExitCode(ActionReport.ExitCode.FAILURE);
        return;
    }
    if (!WorkSecurityMapHelper.doesResourceAdapterNameExist(raName, domain.getResources())) {
        report.setMessage(localStrings.getLocalString("update.connector.work.security.map.noSuchRAFound", "Resource Adapter {0} does not exist. Please specify a resource adapter name.", raName));
        report.setActionExitCode(ActionReport.ExitCode.FAILURE);
        return;
    }
    if (!WorkSecurityMapHelper.doesMapNameExist(raName, securityMapName, domain.getResources())) {
        report.setMessage(localStrings.getLocalString("update.connector.work.security.map.mapNotExist", "WorkSecurity map {0} does not exist for resource adapter {1}. Please give a valid map name.", securityMapName, raName));
        report.setActionExitCode(ActionReport.ExitCode.FAILURE);
        return;
    }
    // check if addPrincipals and removePrincipals have the same value
    if (addPrincipals != null && removePrincipals != null) {
        Iterator it_1 = addPrincipals.entrySet().iterator();
        while (it_1.hasNext()) {
            String ap = ((Map.Entry) it_1.next()).getKey().toString();
            for (String rp : removePrincipals) {
                if (rp.equals(ap)) {
                    report.setMessage(localStrings.getLocalString("update.connector.work.security.map.samePrincipalValues", "This value {0} is given in both --addprincipals and --removeprincipals. " + "The same value cannot given for these options.", ap));
                    report.setActionExitCode(ActionReport.ExitCode.FAILURE);
                    return;
                }
            }
        }
    }
    // check if addUserGroups and removeUserGroups have the same value
    if (addGroups != null && removeGroups != null) {
        Iterator it_1 = addGroups.entrySet().iterator();
        while (it_1.hasNext()) {
            String ag = ((Map.Entry) it_1.next()).getKey().toString();
            for (String rg : removeGroups) {
                if (rg.equals(ag)) {
                    report.setMessage(localStrings.getLocalString("update.connector.work.security.map.sameUsergroupValues", "This value {0} is given in both --addusergroups and --removeusergroups. " + "The same value cannot given for these options.", ag));
                    report.setActionExitCode(ActionReport.ExitCode.FAILURE);
                    return;
                }
            }
        }
    }
    WorkSecurityMap map = WorkSecurityMapHelper.getSecurityMap(securityMapName, raName, domain.getResources());
    final List<PrincipalMap> existingPrincipals = new ArrayList(map.getPrincipalMap());
    final List<GroupMap> existingUserGroups = new ArrayList(map.getGroupMap());
    if (existingPrincipals.isEmpty() && addPrincipals != null) {
        report.setMessage(localStrings.getLocalString("update.connector.work.security.map." + "addPrincipalToExistingUserGroupsWorkSecurityMap", "Failed to add principals to a security map with user groups."));
        report.setActionExitCode(ActionReport.ExitCode.FAILURE);
        return;
    }
    if (existingUserGroups.isEmpty() && addGroups != null) {
        report.setMessage(localStrings.getLocalString("update.connector.work.security.map." + "addUserGroupsToExistingPrincipalsWorkSecurityMap", "Failed to add user groups to a security map with principals."));
        report.setActionExitCode(ActionReport.ExitCode.FAILURE);
        return;
    }
    if (addPrincipals == null && addGroups == null) {
        boolean principalsEmpty = false;
        boolean userGroupsEmpty = false;
        if ((removePrincipals != null) && (removePrincipals.size() == existingPrincipals.size())) {
            principalsEmpty = true;
        }
        if ((removeGroups != null) && (removeGroups.size() == existingUserGroups.size())) {
            userGroupsEmpty = true;
        }
        if (userGroupsEmpty || principalsEmpty) {
            report.setMessage(localStrings.getLocalString("" + "update.connector.work.security.map.principals_usergroups_will_be_null", "The values in your command will delete all principals and usergroups. You cannot " + "delete all principals and usergroups. Atleast one of them must exist."));
            report.setActionExitCode(ActionReport.ExitCode.FAILURE);
            return;
        }
    }
    if (removePrincipals != null) {
        for (String rp : removePrincipals) {
            boolean principalExist = false;
            for (PrincipalMap pm : existingPrincipals) {
                if (pm.getEisPrincipal().equals(rp)) {
                    principalExist = true;
                    break;
                }
            }
            if (!principalExist) {
                report.setMessage(localStrings.getLocalString("" + "update.connector.work.security.map.principalNotExists", "The principal {0} that you want to delete does not exist in security map {1}." + " Please give a valid principal name.", rp, securityMapName));
                report.setActionExitCode(ActionReport.ExitCode.FAILURE);
                return;
            }
        }
    }
    if (removeGroups != null) {
        for (String rg : removeGroups) {
            boolean usergroupExist = false;
            for (GroupMap gm : existingUserGroups) {
                if (gm.getEisGroup().equals(rg)) {
                    usergroupExist = true;
                    break;
                }
            }
            if (!usergroupExist) {
                report.setMessage(localStrings.getLocalString("" + "update.connector.work.security.map.usergroupNotExists", "The usergroup {0} that you want to delete does not exist in security map {1}. " + "Please give a valid user-group name.", rg, securityMapName));
                report.setActionExitCode(ActionReport.ExitCode.FAILURE);
                return;
            }
        }
    }
    if (addPrincipals != null) {
        for (Map.Entry e : addPrincipals.entrySet()) {
            for (PrincipalMap pm : existingPrincipals) {
                if (pm.getEisPrincipal().equals(e.getKey())) {
                    report.setMessage(localStrings.getLocalString("" + "update.connector.work.security.map.principalExists", "The principal {0} already exists in security map {1}. " + "Please give a different principal name.", e.getKey(), securityMapName));
                    report.setActionExitCode(ActionReport.ExitCode.FAILURE);
                    return;
                }
            }
        }
    }
    if (addGroups != null) {
        for (Map.Entry e : addGroups.entrySet()) {
            for (GroupMap gm : existingUserGroups) {
                if (gm.getEisGroup().equals(e.getKey())) {
                    report.setMessage(localStrings.getLocalString("" + "update.connector.work.security.map.groupExists", "The Group {0} already exists in security map {1}. " + "Please give a different group name.", e.getKey(), securityMapName));
                    report.setActionExitCode(ActionReport.ExitCode.FAILURE);
                    return;
                }
            }
        }
    }
    try {
        ConfigSupport.apply(new SingleConfigCode<WorkSecurityMap>() {

            public Object run(WorkSecurityMap wsm) throws PropertyVetoException, TransactionFailure {
                if (addGroups != null) {
                    for (Map.Entry e : addGroups.entrySet()) {
                        GroupMap gm = wsm.createChild(GroupMap.class);
                        gm.setEisGroup((String) e.getKey());
                        gm.setMappedGroup((String) e.getValue());
                        wsm.getGroupMap().add(gm);
                    }
                } else if (addPrincipals != null) {
                    for (Map.Entry e : addPrincipals.entrySet()) {
                        PrincipalMap pm = wsm.createChild(PrincipalMap.class);
                        pm.setEisPrincipal((String) e.getKey());
                        pm.setMappedPrincipal((String) e.getValue());
                        wsm.getPrincipalMap().add(pm);
                    }
                }
                if (removeGroups != null) {
                    for (String rg : removeGroups) {
                        for (GroupMap gm : existingUserGroups) {
                            if (gm.getEisGroup().equals(rg)) {
                                wsm.getGroupMap().remove(gm);
                            }
                        }
                    }
                } else if (removePrincipals != null) {
                    for (String rp : removePrincipals) {
                        for (PrincipalMap pm : existingPrincipals) {
                            if (pm.getEisPrincipal().equals(rp)) {
                                wsm.getPrincipalMap().remove(pm);
                            }
                        }
                    }
                }
                return wsm;
            }
        }, map);
        report.setActionExitCode(ActionReport.ExitCode.SUCCESS);
    } catch (TransactionFailure tfe) {
        Object[] params = { securityMapName, raName };
        report.setMessage(localStrings.getLocalString("update.connector.work.security.map.fail", "Unable to update security map {0} for resource adapter {1}.", params) + " " + tfe.getLocalizedMessage());
        report.setActionExitCode(ActionReport.ExitCode.FAILURE);
        report.setFailureCause(tfe);
    }
}

Example 10 with WorkSecurityMap

use of org.glassfish.connectors.config.WorkSecurityMap in project Payara by payara.

the class ConnectorWorkSecurityMapResourceManager method createConfigBean.

private WorkSecurityMap createConfigBean(Resources param) throws PropertyVetoException, TransactionFailure {
    WorkSecurityMap workSecurityMap = param.createChild(WorkSecurityMap.class);
    workSecurityMap.setName(mapName);
    workSecurityMap.setResourceAdapterName(raName);
    if (principalsMap != null) {
        for (Map.Entry e : principalsMap.entrySet()) {
            PrincipalMap principalMap = workSecurityMap.createChild(PrincipalMap.class);
            principalMap.setEisPrincipal((String) e.getKey());
            principalMap.setMappedPrincipal((String) e.getValue());
            workSecurityMap.getPrincipalMap().add(principalMap);
        }
    } else if (groupsMap != null) {
        for (Map.Entry e : groupsMap.entrySet()) {
            GroupMap groupMap = workSecurityMap.createChild(GroupMap.class);
            groupMap.setEisGroup((String) e.getKey());
            groupMap.setMappedGroup((String) e.getValue());
            workSecurityMap.getGroupMap().add(groupMap);
        }
    }
    return workSecurityMap;
}